jjbruntonandClaude Opus 5 636811e66a fix(api): allow the admin console origin through CORS ...

The production allowlist held only https://sauci.app, so every
/v1/admin/* preflight from https://manage.sauci.app returned 204 with no
Access-Control-Allow-Origin and the browser blocked the request. Login
then reported "Access denied. You are not an administrator." because the
admin app treats any /v1/admin/me failure as a permissions failure.

Add the admin console origin and record in the README that new admin
hosts belong in the Compose contract rather than a Dokploy override.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-31 18:17:10 +01:00

..

backend

fix(api): allow the admin console origin through CORS

2026-08-31 18:17:26 +01:00